Back

Mageia 2020-0313: php-phpmailer security update

Date 01 Aug 2020

Category Mageia Linux Distribution - Security Advisories

630

Posted By LinuxSecurity Advisories

Fix insufficient output escaping bug in file attachment names (CVE-2020-13625). References: - https://bugs.mageia.org/show_bug.cgi?id=26760

MGASA-2020-0313 - Updated php-phpmailer packages fix security vulnerability

Publication date: 01 Aug 2020
URL: https://advisories.mageia.org/MGASA-2020-0313.html
Type: security
Affected Mageia releases: 7
CVE: CVE-2020-13625

Fix insufficient output escaping bug in file attachment names
(CVE-2020-13625).

References:
- https://bugs.mageia.org/show_bug.cgi?id=26760
- https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./thread/OBRDMEV3CB44CAAF5BOHFNV23JVRO6PZ/
- https://github.com/advisories/GHSA-f7hx-fqxw-rvvj
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13625

SRPMS:
- 7/core/php-phpmailer-6.1.6-1.mga7